Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: B0x11j5yxiqku7utY8l56EH5itMwP3ZpfrT+gCWexlg=
Subject key identifier: B8:02:3A:FE:90:C9:19:D4:39:F3:E9:75:97:E1:78:36:AF:41:9F:B9
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 0197B6D7423CF1A9A69F8D0F82D0AA5B7F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: vshqAm+o8LdKrYqywLbxnNxiic2aMEgNqePiHOu3HQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:42:3c:f1:a9:a6:9f:8d:0f:82:d0:aa:5b:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=b8023afe90c919d439f3e97597e17836af419fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:b4:e5:62:1e:d0:a8:4c:2f:85:79:99:92:
74:45:e9:01:fa:0f:e4:e6:bf:90:0a:28:1e:aa:9a:
c9:94:75:c5:a6:26:7d:fe:56:55:08:80:a9:b0:05:
5d:04:02:35:2e:cb:5b:2d:3f:0e:2d:04:5f:f0:05:
04:31:87:07:68:cb:92:e1:8c:d0:76:c5:1a:c5:01:
40:2f:8e:09:cd:88:56:da:1d:c6:90:34:25:e5:c7:
5a:92:f4:ed:96:18:6b:25:36:cc:10:d4:37:83:42:
26:7c:ba:37:54:83:a4:d9:a8:83:ae:19:a2:9d:bb:
3c:90:0e:6b:fe:b9:e7:5d:fe:e9:a6:f7:7e:c5:a5:
0c:79:19:5f:65:8d:dd:89:47:16:00:1b:5a:b4:1d:
f9:35:fa:8c:07:6a:0a:bc:4f:79:7d:17:37:3e:5b:
4b:f8:6a:0d:2b:11:5a:0b:5d:91:5a:4c:66:a5:45:
23:cb:46:36:8d:ff:4d:96:2a:e9:9b:c5:fa:3a:a9:
4f:8a:10:73:41:d8:8f:9c:95:87:af:7d:c7:09:2b:
6d:13:0c:ea:d2:ee:90:dd:0d:b7:ea:9b:3c:d8:42:
df:07:97:ee:c0:0b:37:88:be:83:2e:a8:31:2f:47:
4b:53:61:ff:d9:7f:f6:a8:9f:7d:1d:08:26:f0:d5:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:3A:FE:90:C9:19:D4:39:F3:E9:75:97:E1:78:36:AF:41:9F:B9
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:23:0d:23:f5:85:9b:9d:80:2a:9d:c7:b5:a4:fc:53:75:
b2:43:68:b7:bc:c7:8b:90:c2:a3:58:e1:47:34:64:ff:bd:52:
60:c5:c2:29:1a:74:9b:41:32:04:a6:ce:b4:b2:8f:13:c0:4a:
3b:99:c6:8a:b5:c8:71:30:48:3e:61:fc:da:52:34:41:86:52:
57:62:0e:14:8e:25:a1:9e:17:18:2e:e8:99:4a:52:d8:11:6c:
ac:0f:be:a0:a9:2a:66:f6:53:5c:35:86:20:7b:94:d2:6d:c7:
d8:06:50:c2:c7:43:65:fd:f3:65:2c:6b:73:f5:53:c8:91:c0:
9b:c3:69:5f:68:f7:7a:e7:b0:9a:86:fd:ce:c7:4f:33:c9:3b:
0e:31:0c:c9:fe:c7:52:8b:8a:63:35:17:a9:57:ed:20:8a:25:
8a:9a:be:af:cc:1f:9e:6b:8d:66:a1:fc:08:85:59:f2:18:f4:
18:7b:47:85:a8:fa:86:b2:91:26:41:b0:40:34:af:2e:21:00:
77:25:7d:4c:de:9d:ec:94:87:88:04:45:94:b9:0d:53:29:66:
fe:65:5a:8a:fb:e3:30:56:9c:ef:ed:14:7e:42:7f:33:3d:61:
42:10:58:c1:f8:07:c6:c0:71:82:3d:a7:01:eb:03:80:04:b4:
80:57:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:23 2025 by rpki-client